You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/content/asset_modelling/engagements_tests/OS__findings.md
+7-5Lines changed: 7 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -43,7 +43,7 @@ Finding views contain a variety of tables to help interpret a Finding’s status
43
43
-**Severity**: The severity rating of that Finding, which is applied automatically.
44
44
- As mentioned above, DefectDojo automatically translates a security tool’s severity metric into a Severity score for each Finding, which confers an SLA onto the Finding according to your Asset’s SLA configuration.
45
45
-**SLA**: The intended due date by which the Finding is intended to be resolved.
46
-
-**Status**: The status of the Finding (e.g., Active, Verified, False Positive, Duplicate, Out of SCope, and Under Defect Review).
46
+
-**Status**: The status of the Finding (e.g., Active, Verified, False Positive, Duplicate, Out of Scope, and Under Defect Review).
47
47
-**Finding type**: Whether the Finding is Static (SAST) or Dynamic (DAST).
48
48
-**Date discovered**: The date on which the Finding was discovered.
49
49
-**CWE**: The CWE classification of the Finding.
@@ -160,7 +160,7 @@ The ⋮ kebab menu next to Findings contains the following functions:
160
160
-**Delete**: Deletes the selected Finding.
161
161
162
162
#### Attaching Files to Findings
163
-
You can attach image files to any Finding to provide visual context — for example, a screenshot of a vulnerability in action or a proof-of-concept image.
163
+
You can attach files to any Finding to provide visual context — for example, a screenshot of a vulnerability in action or a proof-of-concept image.
164
164
165
165
Supported file types include:
166
166
@@ -233,7 +233,7 @@ To manually perform Finding Group actions:
233
233
1. Navigate to a list of Findings within a Test.
234
234
2. Select the Finding(s) you wish to add to a Finding Group by clicking the corresponding checkbox.
235
235
3. Click the **Group** checkbox.
236
-
4. Click the corresponding action you wish to complete
236
+
4. Click the corresponding action you wish to complete.
237
237
-**Create**: Creates a Finding Group that includes the selected Findings.
238
238
-**Add to**: Adds the selected Findings to a pre-existing Finding Group.
239
239
-**Remove from any group**: Removes the selected Findings from any Finding Groups they were previously a part of.
@@ -254,6 +254,8 @@ The adjoining **Create Finding Groups for all Findings** checkbox performs two f
254
254
255
255

256
256
257
+
If an option is not selected from the Group By dropdown menu during import, no grouping will occur.
258
+
257
259
If the grouping criteria (e.g., component name, vulnerability ID, etc.) isn’t populated in the Finding, it will not have a group created or be added to a pre-existing Finding Group.
258
260
259
261
If a scan is imported that reveals 10 Findings that are not grouped, and the same scan is reimported and the Findings are grouped, the first 10 Findings will not be added to that Finding Group (i.e., the Finding Group will only include the 10 Findings from the reimport, not the 10 Findings from the initial and subsequent import).
@@ -294,6 +296,6 @@ More information about DefectDojo’s Report Builder can be found [here](/metric
294
296
295
297
#### Export Findings
296
298
297
-
Pages that show a list of Findings or a list of engagements have a CSV and Excel export option in the top-right dropdown menu.
299
+
Pages that show a list of Findings or a list of Engagements have a CSV and Excel export option in the top-right dropdown menu.
298
300
299
-
From any Findings list page, open the dropdown menu in the top-right corner to export the visible Findings as a CSV or Excel file. The list of engagements can also be exported as CSV or Excel using the same dropdown menu on the engagements list page.
301
+
From any Findings list page, open the dropdown menu in the top-right corner to export the visible Findings as a CSV or Excel file. The list of Engagements can also be exported as CSV or Excel using the same dropdown menu on the Engagements list page.
0 commit comments